Brief
A major HIS software provider from Germany, which had a pharmacy management module, needed support in modernizing their solution and adapting it to new infrastructure and regulatory requirements.
Our task was to carry out the technological transformation of the pharmacy module and migrate it to a cloud environment, while ensuring compliance with the Telematics Infrastructure (TI) and KBV guidelines.
Challenge
In 2022, after the introduction of regulations enabling e-prescription issuance in Germany, many software providers for medical facilities faced the challenge of integrating with the Telematics Infrastructure. The problem was particularly complex for HIS systems based on older technologies that were not adapted to TI requirements – both in terms of performance and security.
In this project to update the hospital pharmacy module, we had to move the whole thing to web architecture to integrate with TI. The new solution had to be accessible remotely, scalable, secure, easy to maintain, and meet strict KBV requirements for usability and functionality.
List of Main Challenges
- Implementing secure communication with Telematics Infrastructure connectors, handling SMC-B and HBA cards, and data exchange with the German e-prescription system.
- Migration from an outdated desktop solution (Delphi) to a modern web application.
- Ensuring compatibility with other HIS system modules and their continued operation.
- Meeting KBV certification requirements regarding functionality, security, and documentation.
- Sensitive data management – securing patients’ medical data.
We described the above problems and others we’ve encountered with similar projects in another blog post on the most common challenges associated with implementing e-prescriptions: 4 Challenges for software vendors while implementing e-prescription in Germany
Scope of Work and Solution
As part of our ongoing collaboration with the TI department of our client, we migrated their entire pharmacy module from a Delphi-written desktop application to a Spring Boot and Angular web application running in the AWS cloud environment.
The new solution retains the functionalities of the old desktop version, but thanks to newer technology, it can now integrate efficiently with IT. Consequently, the module was adapted to handle electronic prescriptions and secure medical staff authentication. The new solution was also integrated with external pharmaceutical systems and designed according to KBV guidelines.
In one of our recent blog posts, we describe what to consider when designing IT solutions for doctors: Design for Doctors: Legal and Usability Issues in Medical Software
As part of the project, we delivered:
- Technological migration – transition from a Delphi-based desktop application to a modern web solution using Spring Boot (backend) and Angular (frontend).
- E-prescription module implementation – handling the complete e-prescription lifecycle (creation, signing, transmission, archiving), along with taxation-related functions, in accordance with German law.
- Telematics Infrastructure integration – implementation of secure Site-to-Site VPN connections, authentication using SMC-B and HBA cards, geo-fencing, and client environment separation.
- Connection with external drug suppliers – integration with external pharmaceutical provider APIs using the MSV3 protocol.
- Drug data search and access – integration with the ABDA database and advanced full-text drug search using Apache Lucene.
- Security and authorization – data encryption in transit and at rest (including sensitive data), key management through AWS KMS, role-based access control (RBAC).
The system was prepared to meet all KBV certification requirements and passed key compliance tests.
The result of our collaboration is a modern, secure, and efficient application for hospital pharmacies that streamlines their daily operations and meets the requirements of the German healthcare system.
Lessons Learned
In summary, we can meet challenges related to implementing secure Site-to-Site VPN connections, handling medical data encryption, authentication using SMC-B and HBA cards, and integration with TI connectors:
- KBV certification – we can prepare systems for rigorous certification processes, taking care of both technical and documentation aspects.
- Legacy system migrations – we conduct or support secure system migrations for medical facilities without disrupting daily operations.
- E-prescription systems – we design complete e-prescription handling systems in accordance with German regulations, including integration with drug databases and digital signature functions.
- Telematics Infrastructure integration – we have practical experience in securely connecting to TI and handling SMC-B and HBA cards, in compliance with German security standards.
If you’re facing similar challenges, contact us – we’ll analyze your situation and propose a tailored solution.
People who read this article also read:
